CVE-2010-4964: D-Link Dcs-2121

High severity, CVSS 9.0. EPSS: 3.8% chance of exploitation in the next 30 days.

recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability.

Affected products

• D-Link Dcs-2121
• D-Link Dcs-2121 Firmware: version 1.04 only

Published 2011-10-16. Last modified 2026-06-16.